← Back to Skills Marketplace
wlshlad85

Superpowers Dev Workflow

by wlshlad85 · GitHub ↗ · v1.0.0
cross-platform ✓ Security Clean
29916
Downloads
23
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install superpowers
Description
Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan → subagent executi...
Usage Guidance
Install this if you want a structured, sometimes heavyweight coding workflow. Expect it to read project context, run test and git commands, create planning documents, make commits, and optionally use subagents; review branch merge, push, PR, or discard prompts carefully before approving them.
Capability Analysis
Type: OpenClaw Skill Name: superpowers Version: 1.0.0 This skill bundle is suspicious due to its extensive use of powerful execution capabilities (`exec`, `sessions_spawn`) and dynamic command generation. Files like `SKILL.md`, `references/finishing-branch.md`, and `references/writing-plans.md` instruct the agent to construct and execute various shell commands (`git`, `gh`, `pytest`, `pnpm test`, `cargo test`, `go test`) using potentially user-controlled input (e.g., branch names, PR titles). This creates a significant risk of prompt injection and shell injection if user input is not rigorously sanitized, allowing an attacker to execute arbitrary commands or manipulate sub-agent behavior. While the skill's stated purpose is legitimate software development, the inherent power and lack of explicit input sanitization for command construction elevate it beyond benign.
Capability Assessment
✓ Credentials
Use of exec, tests, git commands, and sessions_spawn is disclosed and proportionate for a coding workflow, with exact-path planning and verification steps emphasized.
✓ Install Mechanism
No install scripts, executable files, dependency installation, remote payload retrieval, or tool replacement behavior were present in the artifact package.
ℹ Instruction Scope
Some activation language is broad, such as planning/building/debugging phrasing, but the artifact also excludes non-code tasks and one-liner fixes, requires design approval before code, and offers user choice before subagent-driven execution.
ℹ Persistence & Privilege
The workflow intentionally creates docs/plans files, commits changes, and may merge, push, create PRs, or delete a feature branch, but the higher-impact branch actions are presented as explicit user choices and discard requires typed confirmation.
✓ Purpose & Capability
The skill is Markdown-only and describes a spec-first/TDD software development process using project inspection, tests, git commits, and optional subagent review; these capabilities are coherent with its stated purpose.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install superpowers
  3. After installation, invoke the skill by name or use /superpowers
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial port of obra/superpowers for OpenClaw — spec-first, TDD, subagent-driven development workflow
Metadata
Slug superpowers
Version 1.0.0
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Superpowers Dev Workflow?

Spec-first, TDD, subagent-driven software development workflow. Use when: (1) building any new feature or app — triggers brainstorm → plan → subagent executi... It is an AI Agent Skill for Claude Code / OpenClaw, with 29916 downloads so far.

How do I install Superpowers Dev Workflow?

Run "/install superpowers" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Superpowers Dev Workflow free?

Yes, Superpowers Dev Workflow is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Superpowers Dev Workflow support?

Superpowers Dev Workflow is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Superpowers Dev Workflow?

It is built and maintained by wlshlad85 (@wlshlad85); the current version is v1.0.0.

💬 Comments